Behavioral task
behavioral1
Sample
821be3fb9f65e0593a4e5eda9dac6ca2e2042e42024c5c69e3034da3cff5a1d4.exe
Resource
win7-20220812-en
General
-
Target
821be3fb9f65e0593a4e5eda9dac6ca2e2042e42024c5c69e3034da3cff5a1d4
-
Size
86KB
-
MD5
9310d62a901d5dd9327762c9a5a0fafe
-
SHA1
18d88f6b396a22b48e33fdc37d5ac904de56ae7b
-
SHA256
821be3fb9f65e0593a4e5eda9dac6ca2e2042e42024c5c69e3034da3cff5a1d4
-
SHA512
a09e2b637b8b62980f9197e64992704467367e947c5b7bc4ecc373fe5ec67194f8c82e788fc00a9e01bd5c6cbd9e674835a34d89b1b34e00cc0d61563a1c72a7
-
SSDEEP
1536:XUcCC6n1RBrUD5CM7E/z7Bt+fSSB360aPZlICNfK7JugkPz:XU/P1RFUdCM7k1t+fNt7sytMPz
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
821be3fb9f65e0593a4e5eda9dac6ca2e2042e42024c5c69e3034da3cff5a1d4.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 32KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ